> man sshd and read the section entitled AUTHORIZED_KEYS FILE FORMAT.
> Then strongly consider adding command="whatever" restrictions.
you are absolutely right.
I am already using it with "command", although I forgot to mention it,
because I did not change this for a very long time.
thanks for reminding me.
M.